321
you are viewing a single comment's thread
view the rest of the comments
[-] aeronmelon@lemmy.world 89 points 1 day ago

“Timmy, why did the dog have root access?”

[-] crank0271@lemmy.world 33 points 1 day ago
[-] elvith@feddit.org 14 points 1 day ago
~$ sudo eat -rm ./Homework

@crank0271@lemmy.world is not in the sudoers file. This incident will be reported.

sigh

~$ groups
crank0271 docker

~$ docker run -rm -v ./Homework:/mnt/Homework --entrypoint '/bin/sh' alpine:latest -c 'sudo eat -rf /mnt/Homework'
[-] dgriffith@aussie.zone 8 points 1 day ago

~$ groups crank0271 docker

~$ docker run -rm....

No joke, this is exactly what LLMs will do if they can't do something directly.

[-] elvith@feddit.org 4 points 23 hours ago

This is why I told some colleagues several times to NOT put their user into the docker group AND to set the docker command for Claude at least to 'ask every time'.

That fucker circumvents your guardrails all the time. "Oh I'm not allowed to read a .env file with the harness? Let's check cat .env!" Yesterday Claude even wrote a little python script to try to print the .env file, because he thought he'd need it to debug a container. (Spoiler - the problem wasn't even with some env vars and also the .env was just filled with dummy values as it is an example from a public repository anyways).

[-] Zarobi@aussie.zone 3 points 17 hours ago* (last edited 17 hours ago)

Soon it will be "Claude wrote a zero day container escape privilege escalation exploit because it was faster than working within the given limitations". I just don't give any LLM file system access

this post was submitted on 15 Oct 2026
321 points (93.5% liked)

Technology

88814 readers
5743 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS